May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1223858] Cannot mount kerberized nfs4 share with kernel 5.14.21-150500.55.59-default
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223858 Ursula Brueckner <ursula.brueckner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ursula.brueckner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1212522] Package vorta fails to start
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1212522 https://bugzilla.suse.com/show_bug.cgi?id=1212522#c9 --- Comment #9 from Matthias Bach <marix(a)marix.org> --- This was broken starting in 15.5 and wasn't fixed for 15.6. The irony is that for a long time now there is already a working version for 15.5 and 15.6 in the `home:ecsos:Backup` project. And, unless I overlooked something that's pulled in from devel:languages:python:backports on my system, that version doesn't need anything that's not already in the main distro. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223144] New: GIMP segmentation fault
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223144 Bug ID: 1223144 Summary: GIMP segmentation fault Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: oberkut(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874375 --> https://bugzilla.suse.com/attachment.cgi?id=874375&action=edit Crash log GIMP Segmentation fault 1.Open GIMP. 2.Create Project. 3.Draw any image. 4.Close GIMP (Not saved changes). -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1224791] New: VUL-0: CVE-2024-33901: keepassxc: recovery of passwords stored in the .kdbx database
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1224791 Bug ID: 1224791 Summary: VUL-0: CVE-2024-33901: keepassxc: recovery of passwords stored in the .kdbx database Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/406771/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: camila.matos(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Issue in KeePassXC 2.7.7 allows an attacker to recover some passwords stored in the .kdbx database. References: https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 https://keepassxc.org/blog/ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-33901 https://www.cve.org/CVERecord?id=CVE-2024-33901 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1201822] VUL-0: CVE-2022-34037: caddy: oob read allows for DoS
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1201822 https://bugzilla.suse.com/show_bug.cgi?id=1201822#c4 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi(a)suse.com |security-team(a)suse.de Status|IN_PROGRESS |NEW --- Comment #4 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- The SR was accepted and this is fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200279] VUL-0: CVE-2022-29718: caddy: unauthenticated open redirect vulnerability
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1200279 https://bugzilla.suse.com/show_bug.cgi?id=1200279#c5 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi(a)suse.com |security-team(a)suse.de --- Comment #5 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- The SRs were accepted and this is fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1207208] VUL-0: CVE-2022-41721: TRACKERBUG: traefik: x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1207208 https://bugzilla.suse.com/show_bug.cgi?id=1207208#c2 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi(a)suse.com |security-team(a)suse.de --- Comment #2 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- This was fixed in https://build.opensuse.org/request/show/1058870. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1210505] VUL-0: CVE-2023-29013: traefik,traefik1.7: HTTP header parsing DoS
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1210505 https://bugzilla.suse.com/show_bug.cgi?id=1210505#c2 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi(a)suse.com |security-team(a)suse.de --- Comment #2 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- This issue has been fixed in https://build.opensuse.org/request/show/1093393. Traefik 1.7 is no longer available in Factory or Devel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223144] GIMP segmentation fault
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223144 https://bugzilla.suse.com/show_bug.cgi?id=1223144#c5 --- Comment #5 from Paolo Stivanin <pstivanin(a)suse.com> --- I can't reproduce the issue. I see that you are still on 2.10.38. Can you please update TW to the latest snapshot? Thanks -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222919] criterion fails to build on Leap 15.6 - ImportError: cannot import name 'builder'
by bugzilla_noreply＠suse.com 22 May '24

22 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222919 https://bugzilla.suse.com/show_bug.cgi?id=1222919#c6 Paolo Stivanin <pstivanin(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(pstivanin(a)suse.co | |m) | --- Comment #6 from Paolo Stivanin <pstivanin(a)suse.com> --- I guess that's because Leap is not using py311 as default (just a guess, I'd have to check), so the following fails: [ 29s] Traceback (most recent call last): [ 29s] File "/usr/bin/nanopb_generator.py", line 36, in <module> [ 29s] import google.protobuf.text_format as text_format [ 29s] ModuleNotFoundError: No module named 'google' [ 29s] --nanopb_out: protoc-gen-nanopb: Plugin failed with status code 1. because /usr/bin/nanopb_generator.py calls python3 and python3 is a symlink to 3.6. Or was the python interpreter changed to 3.11 by default on Leap? -- You are receiving this mail because: You are on the CC list for the bug.

1 0